This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/oXYPZ4avfp145oFgjMNonlejP24.roa File: oXYPZ4avfp145oFgjMNonlejP24.roa (raw, json) Hash identifier: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo= Subject key identifier: A1:76:0F:67:86:AF:7E:9D:78:E6:81:60:8C:C3:68:9E:57:A3:3F:6E Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94 Certificate serial: 019B7BA4C53990A000D6F027DF5EAA0E2CFF Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/oXYPZ4avfp145oFgjMNonlejP24.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208649 IP address blocks: 185.75.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c5:39:90:a0:00:d6:f0:27:df:5e:aa:0e:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1760f6786af7e9d78e681608cc3689e57a33f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:28:33:29:b9:45:53:62:89:e8:33:f7:e4: 2e:b6:28:c9:a0:ad:0d:6b:37:54:04:aa:80:7d:1e: 89:60:83:57:a9:5b:be:38:c2:e6:c8:1f:87:c3:60: d4:24:90:fa:81:ee:85:3f:ef:dc:9b:8c:3a:71:26: 77:27:1d:d9:cf:99:d3:93:13:82:6a:68:b4:54:a0: dd:55:3e:a4:e2:93:24:fc:6d:89:9c:d1:4f:f3:e3: 90:58:2a:73:53:1f:69:80:54:fa:15:4e:17:74:4c: 08:e6:34:0d:ac:f6:72:ef:19:19:e5:ca:00:9d:6d: 85:ed:63:90:d5:b7:4b:6b:3c:46:b1:45:c7:21:d0: 85:c6:8d:74:54:e6:23:65:b4:5a:cf:f7:c9:94:10: f9:aa:40:02:f7:43:09:23:29:68:15:84:e3:0b:4e: 6d:8a:0d:0b:2f:97:8d:e8:1e:25:67:08:2f:84:64: a2:d8:bf:0d:f6:e4:8b:5d:50:c6:c0:84:3f:60:f1: 99:8e:fb:9e:d8:ef:97:4f:e2:e0:56:56:ef:5c:bf: b1:a0:57:f3:8b:b5:4e:1b:da:d1:16:bd:59:4e:9c: 8a:00:a1:40:70:d9:15:cc:90:1b:d5:33:4a:5c:df: d6:ff:27:00:26:1d:73:17:94:c6:9d:45:b6:18:ab: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:76:0F:67:86:AF:7E:9D:78:E6:81:60:8C:C3:68:9E:57:A3:3F:6E X509v3 Authority Key Identifier: keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/oXYPZ4avfp145oFgjMNonlejP24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.221.0/24 Signature Algorithm: sha256WithRSAEncryption 23:b2:a8:27:f6:a8:b0:4a:26:1b:c7:76:2b:07:9a:b9:50:f5: 76:a9:de:b6:fc:bc:86:dc:62:63:f8:8f:c7:58:ff:51:04:29: 8b:39:d4:61:dc:7d:d7:d6:53:62:0d:ed:84:72:be:ae:90:44: d6:e1:0f:39:22:39:79:c4:c0:71:20:b0:e9:3e:7c:15:99:05: 3e:e3:fc:1c:7a:a1:6d:1e:6f:99:87:c3:c4:e4:3c:e3:e0:51: fb:75:08:68:a3:06:f2:5e:68:3e:f9:76:a4:dd:1b:04:9f:78: 91:39:33:99:1f:1c:8e:1f:a1:27:9c:cd:a8:c3:cd:92:b4:e6: 5b:fa:6f:43:23:e7:68:d6:43:55:99:6a:39:16:95:80:d8:35: 95:15:65:2c:16:61:e5:33:2a:b7:4a:5f:41:bb:56:88:d6:99: 3c:fe:e1:44:01:f5:23:1e:13:31:1f:04:15:11:a7:23:3e:5b: 12:49:63:54:e3:03:34:69:38:5d:c3:ed:a2:0c:6e:a1:40:2c: 4d:83:ea:5e:f2:9b:27:f7:0b:42:b7:4e:37:b6:c9:f5:10:2b: 74:40:a7:01:de:52:b5:a1:1b:5d:43:bf:b6:68:2d:ad:46:28: 21:5b:71:c1:81:78:17:f7:75:9f:74:29:c7:b5:74:39:77:e9: fe:d9:b7:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMU5kKAA1vAn316qDiz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzM0YWQ5YjNmYzUyMTAzMGJlOTlhNTE1NzIxMWI2NjMy MTZjOTQwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTc2MGY2Nzg2YWY3ZTlkNzhlNjgxNjA4Y2MzNjg5ZTU3YTMzZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/0oMym5RVNiiegz9+QutijJoK0N azdUBKqAfR6JYINXqVu+OMLmyB+Hw2DUJJD6ge6FP+/cm4w6cSZ3Jx3Zz5nTkxOC ami0VKDdVT6k4pMk/G2JnNFP8+OQWCpzUx9pgFT6FU4XdEwI5jQNrPZy7xkZ5coA nW2F7WOQ1bdLazxGsUXHIdCFxo10VOYjZbRaz/fJlBD5qkAC90MJIyloFYTjC05t ig0LL5eN6B4lZwgvhGSi2L8N9uSLXVDGwIQ/YPGZjvue2O+XT+LgVlbvXL+xoFfz i7VOG9rRFr1ZTpyKAKFAcNkVzJAb1TNKXN/W/ycAJh1zF5TGnUW2GKvPjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKF2D2eGr36deOaBYIzDaJ5Xoz9uMB8GA1UdIwQY MBaAFOczStmz/FIQML6ZpRVyEbZjIWyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEt MzcyMmRmMDczNjAzLzEvb1hZUFo0YXZmcDE0NW9GZ2pNTm9ubGVqUDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEtMzcyMmRmMDczNjAz LzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUvdMA0G CSqGSIb3DQEBCwUAA4IBAQAjsqgn9qiwSiYbx3YrB5q5UPV2qd62/LyG3GJj+I/H WP9RBCmLOdRh3H3X1lNiDe2Ecr6ukETW4Q85Ijl5xMBxILDpPnwVmQU+4/wceqFt Hm+Zh8PE5Dzj4FH7dQhoowbyXmg++Xak3RsEn3iROTOZHxyOH6EnnM2ow82StOZb +m9DI+do1kNVmWo5FpWA2DWVFWUsFmHlMyq3Sl9Bu1aI1pk8/uFEAfUjHhMxHwQV EacjPlsSSWNU4wM0aThdw+2iDG6hQCxNg+pe8psn9wtCt043tsn1ECt0QKcB3lK1 oRtdQ7+2aC2tRighW3HBgXgX93WfdCnHtXQ5d+n+2bdK -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:35 2026 by rpki-client